Developing the Defensive Application Security Program
Creating your Websites and Web Applications inventory
Defining proper Software Security controls by Application Risk
Quick Test and Quick Wins with OWASP ZAP
Selecting and using proper Static Analysis tools
Finding insecure libraries using OWASP Dependency Check
Virtual Patching of legacy applications with Mod_Security
Applying Secure-Headers automatically
Detecting malicious behavior with OWASP AppSensor
Developing and presenting the Security Dashboard
The intended audience is very broad from developers to managers, beginners to advanced users.
The length is one-day.
The students will receive the class syllabus and book.
This course is a summarized version of a six-month class taught in 3 courses of our University.
The trainer is a PhD student in Cyber-Security and professor at IFC (Catarinense Federal Institute), (ISC)2's Certified Secure Software Lifecycle Professional (CSSLP),
ISSECO® Certified Professional for Secure Software Engineering (CPSSE), ISO/IEC 27002 Foundation Certified,
ISEB/ISTQB Certified Professional e ITIL F.
Worked as Security Consultant and implementing OWASP best practices for securing software in companies like DELL, EDS (HP) and Elavon/US Bank.
Published articles at international conferences and presented at OWASP AppSec Latam, FLISOL and RoadSec between others.
